Overview

overview

10

Static

static

1

9b2f171a48...1c.ps1

windows7-x64

1

9b2f171a48...1c.ps1

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b2f171a482bb7a217bc5831a7dcbf1c

  • Size

    485KB

  • Sample

    231222-qfcklaefen

  • MD5

    9b2f171a482bb7a217bc5831a7dcbf1c

  • SHA1

    1ee718a4449be57fd88455a2de6150d6506057df

  • SHA256

    ad86961a4df9ed275fa5cbf709b6d394f992a531cf0762ff1de73ab832f91c5a

  • SHA512

    6427bd1d42780b24a8b49f487d94e986cb84dfe4abd7361876520bf6d779f2aff3e667edfb577f4315d2804f23d44569c368f18b5ccb06a62beb71cc8061d6c1

  • SSDEEP

    12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64figu:q3wu

Score
10/10
oskiinfostealer

Malware Config

Extracted

Family

oski

C2

/103.114.107.28/l25/

Targets

    • Target

      9b2f171a482bb7a217bc5831a7dcbf1c

    • Size

      485KB

    • MD5

      9b2f171a482bb7a217bc5831a7dcbf1c

    • SHA1

      1ee718a4449be57fd88455a2de6150d6506057df

    • SHA256

      ad86961a4df9ed275fa5cbf709b6d394f992a531cf0762ff1de73ab832f91c5a

    • SHA512

      6427bd1d42780b24a8b49f487d94e986cb84dfe4abd7361876520bf6d779f2aff3e667edfb577f4315d2804f23d44569c368f18b5ccb06a62beb71cc8061d6c1

    • SSDEEP

      12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64figu:q3wu

    Score
    10/10
    oskiinfostealer

    • Oski

      Oski is an infostealer targeting browser data, crypto wallets.

      infostealeroski

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks